CVE-2026-105186

A flaw has been found in itsourcecode Online Admission System 1.0. This impacts an unknown function of the file /new.php. Executing a manipulation of the argument schedid can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used.

  • Published Oct 5, 2026
  • CVSS 2.1 low
  • 0.2% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-105186 at the National Vulnerability Database